@rizom/ops 0.2.0-alpha.44 → 0.2.0-alpha.440
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +82 -1
- package/dist/age-key-bootstrap.d.ts +1 -1
- package/dist/brains-ops.js +736 -335
- package/dist/capability-bundle-migration.d.ts +22 -0
- package/dist/cert-bootstrap.d.ts +4 -2
- package/dist/content-repo-ref.d.ts +10 -0
- package/dist/content-repo.d.ts +1 -1
- package/dist/deploy.js +110 -166
- package/dist/directory-sync-stress-system.d.ts +75 -0
- package/dist/directory-sync-stress.d.ts +117 -0
- package/dist/entries/deploy.d.ts +4 -2
- package/dist/health-watchdog-smoke.d.ts +54 -0
- package/dist/image-inventory.d.ts +4 -0
- package/dist/image-types.d.ts +7 -0
- package/dist/images.d.ts +82 -0
- package/dist/index.d.ts +8 -0
- package/dist/index.js +736 -323
- package/dist/legacy-pilot-migration.d.ts +11 -0
- package/dist/legacy-projection-job-recovery.d.ts +29 -0
- package/dist/load-registry.d.ts +61 -6
- package/dist/observed-status.d.ts +1 -1
- package/dist/parse-args.d.ts +2 -12
- package/dist/preview-domain.d.ts +9 -0
- package/dist/reconcile-dry-run.d.ts +9 -0
- package/dist/run-command.d.ts +20 -4
- package/dist/schema.d.ts +126 -163
- package/dist/secrets-encrypt.d.ts +7 -13
- package/dist/secrets-push.d.ts +1 -1
- package/dist/ssh-key-bootstrap.d.ts +1 -26
- package/dist/stage-legacy-crossover.d.ts +25 -0
- package/dist/stress-command.d.ts +14 -0
- package/dist/stress-git-checkout.d.ts +21 -0
- package/dist/stress-health-monitor.d.ts +46 -0
- package/dist/upgrade.d.ts +10 -0
- package/dist/user-offboard.d.ts +61 -0
- package/dist/verify-user.d.ts +22 -0
- package/package.json +50 -42
- package/templates/rover-pilot/.env.schema +20 -5
- package/templates/rover-pilot/.github/actions/varlock-env/action.yml +47 -0
- package/templates/rover-pilot/.github/workflows/build.yml +70 -17
- package/templates/rover-pilot/.github/workflows/deploy.yml +74 -57
- package/templates/rover-pilot/.github/workflows/directory-sync-stress.yml +119 -0
- package/templates/rover-pilot/.github/workflows/health-watchdog-smoke.yml +95 -0
- package/templates/rover-pilot/.github/workflows/offboard.yml +107 -0
- package/templates/rover-pilot/.github/workflows/reconcile.yml +10 -4
- package/templates/rover-pilot/.github/workflows/upgrade.yml +104 -0
- package/templates/rover-pilot/README.md +13 -5
- package/templates/rover-pilot/deploy/scripts/create-predeploy-backup.ts +936 -0
- package/templates/rover-pilot/deploy/scripts/decrypt-user-secrets.ts +80 -24
- package/templates/rover-pilot/deploy/scripts/helpers.ts +2 -0
- package/templates/rover-pilot/deploy/scripts/install-health-watchdog.ts +144 -0
- package/templates/rover-pilot/deploy/scripts/provision-server.ts +51 -21
- package/templates/rover-pilot/deploy/scripts/resolve-deploy-handles.ts +4 -0
- package/templates/rover-pilot/deploy/scripts/resolve-missing-images.ts +13 -0
- package/templates/rover-pilot/deploy/scripts/resolve-user-config.ts +40 -9
- package/templates/rover-pilot/deploy/scripts/sync-content-repo.ts +51 -47
- package/templates/rover-pilot/deploy/scripts/update-dns.ts +72 -16
- package/templates/rover-pilot/deploy/scripts/validate-secrets.ts +12 -1
- package/templates/rover-pilot/deploy/scripts/verify-runtime-image.ts +18 -0
- package/templates/rover-pilot/docs/canonical-crossover-record.md +107 -0
- package/templates/rover-pilot/docs/onboarding-checklist.md +23 -14
- package/templates/rover-pilot/docs/operator-playbook.md +357 -29
- package/templates/rover-pilot/docs/user-onboarding.md +48 -463
- package/templates/rover-pilot/package.json +1 -0
- package/templates/rover-pilot/pilot.yaml +6 -4
- package/dist/origin-ca.d.ts +0 -1
- package/dist/push-secrets.d.ts +0 -9
- package/dist/push-target.d.ts +0 -2
- package/dist/run-subprocess.d.ts +0 -6
- package/templates/rover-pilot/.kamal/hooks/pre-deploy +0 -9
|
@@ -0,0 +1,22 @@
|
|
|
1
|
+
import { z } from "@brains/utils/zod";
|
|
2
|
+
import { CAPABILITY_BUNDLE_CONTRACT, type CanonicalBundleId } from "./schema";
|
|
3
|
+
declare const legacyBundleIdSchema: z.ZodEnum<{
|
|
4
|
+
core: "core";
|
|
5
|
+
site: "site";
|
|
6
|
+
publishing: "publishing";
|
|
7
|
+
team: "team";
|
|
8
|
+
}>;
|
|
9
|
+
export type LegacyCanonicalBundleId = z.output<typeof legacyBundleIdSchema>;
|
|
10
|
+
export interface SelectionRewrite {
|
|
11
|
+
sourceBundles: LegacyCanonicalBundleId[];
|
|
12
|
+
targetBundles: CanonicalBundleId[];
|
|
13
|
+
}
|
|
14
|
+
export interface CapabilityBundleReview {
|
|
15
|
+
bundleContract: typeof CAPABILITY_BUNDLE_CONTRACT;
|
|
16
|
+
pilot: SelectionRewrite;
|
|
17
|
+
cohorts: Record<string, SelectionRewrite>;
|
|
18
|
+
}
|
|
19
|
+
export declare function parseCapabilityBundleReview(input: string): CapabilityBundleReview;
|
|
20
|
+
export declare function migrateCanonicalPilotYaml(input: string, review: CapabilityBundleReview["pilot"]): string;
|
|
21
|
+
export declare function migrateCanonicalCohortYaml(input: string, cohortId: string, review: SelectionRewrite | undefined): string;
|
|
22
|
+
export {};
|
package/dist/cert-bootstrap.d.ts
CHANGED
|
@@ -1,9 +1,10 @@
|
|
|
1
|
-
import {
|
|
2
|
-
import { type RunCommand } from "
|
|
1
|
+
import type { FetchLike } from "@brains/utils/fetch-like";
|
|
2
|
+
import { type RunCommand } from "@brains/deploy-support/run-subprocess";
|
|
3
3
|
export interface CertBootstrapOptions {
|
|
4
4
|
env?: NodeJS.ProcessEnv | undefined;
|
|
5
5
|
cfApiToken?: string | undefined;
|
|
6
6
|
cfZoneId?: string | undefined;
|
|
7
|
+
handle?: string | undefined;
|
|
7
8
|
fetchImpl?: FetchLike;
|
|
8
9
|
logger?: (message: string) => void;
|
|
9
10
|
pushTo?: string | undefined;
|
|
@@ -14,6 +15,7 @@ export interface CertBootstrapResult {
|
|
|
14
15
|
certificatePath: string;
|
|
15
16
|
privateKeyPath: string;
|
|
16
17
|
certificatePem: string;
|
|
18
|
+
secretsSnippetPath: string;
|
|
17
19
|
}
|
|
18
20
|
export declare function runPilotCertBootstrap(rootDir: string, options?: CertBootstrapOptions): Promise<{
|
|
19
21
|
success: boolean;
|
|
@@ -0,0 +1,10 @@
|
|
|
1
|
+
export interface ContentRepoRef {
|
|
2
|
+
org: string;
|
|
3
|
+
name: string;
|
|
4
|
+
}
|
|
5
|
+
/**
|
|
6
|
+
* A user's contentRepo is either a bare repo name (owned by the pilot
|
|
7
|
+
* org) or an org-qualified `org/name` override.
|
|
8
|
+
*/
|
|
9
|
+
export declare function resolveContentRepoRef(contentRepo: string, githubOrg: string): ContentRepoRef;
|
|
10
|
+
export declare function renderContentRepoRef(contentRepo: string, githubOrg: string): string;
|
package/dist/content-repo.d.ts
CHANGED
|
@@ -1,5 +1,5 @@
|
|
|
1
1
|
import type { ResolvedUser } from "./load-registry";
|
|
2
|
-
import { type RunCommand } from "
|
|
2
|
+
import { type RunCommand } from "@brains/deploy-support/run-subprocess";
|
|
3
3
|
import type { ContentRepoFile } from "./user-runner";
|
|
4
4
|
type FetchImpl = (input: string | URL | Request, init?: RequestInit) => Promise<Response>;
|
|
5
5
|
export interface ContentRepoSyncOptions {
|